CVE-2025-47758: Buffer Overflow
V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6File!CTxSubFile::getProgramFilename function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47758?
CVE-2025-47758 has a high severity rating due to the potential for stack-based buffer overflow leading to arbitrary code execution.
How do I fix CVE-2025-47758?
To fix CVE-2025-47758, upgrade to V-SFT version 6.2.5.1 or later, which contains a patch for the vulnerability.
What types of attacks can exploit CVE-2025-47758?
CVE-2025-47758 can be exploited through specially crafted V7 or V8 files that trigger a stack-based buffer overflow.
What are the potential consequences of CVE-2025-47758 exploitation?
Exploitation of CVE-2025-47758 can lead to application crashes, information disclosure, and arbitrary code execution on affected systems.
Which versions of V-SFT are affected by CVE-2025-47758?
V-SFT versions 6.2.5.0 and earlier are affected by CVE-2025-47758 and should be upgraded to a non-vulnerable version.